The Site is Signing Me Out

There should have only been one initial sign-out.

Curious about re-re-re-verifications though. I haven't been able to replicate that with the first verification working without issue. I do know after verification you'll need to sign-in again though. If there are any sign-outs after you've been verified, that's definitely not intentional!

Out of curiosity, did anyone take a "while" to go click on their verification link?

Quote From Crusader2010

For me it worked ok. But i managed to circumvent the cloudflare check, and logged in through the dolphin browser on android (validated the email on firefox), which was impossible before (due to the infinite checking loop).

The cloudflare check is currently disabled which is why you were able to get through.

I still don't know what causes the issue, but there are other people online who have it. Typically from what I've seen it's out of date browsers or browsers that are very niche that can't reliably get by the challenge. That and potentially combined by a geolocation could cause Cloudflare to think you're not human.

I disabled it though due to some improvements we have to protect against bot users. Not going to talk about them for obvious reasons, but if it ends up working out, that'd be a plus for the few folks who were having problems.

Quote From NebuchadnezzarHS

Not sure what is going on since yesterday, but here are some of my initial observations:

1. This site is using a lot of cookies, while I am typing this apparently 111 cookies taking up 44MB
2. Cookies seem to be "cleared" and recreated with every page visit
3. Every time I close my Google Chrome browser app (Android), reopening the app afterwards I have to sign in again on this site

I did not change any browser settings on my side since yesterday. 

Are you now using a different type of cookies with very short expiry perhaps? 

The vast majority of the cookies that are set are from ad networks. It wouldn't surprise me if they change often or get wiped out when they no longer matter. That's not something that I have any control over, nor should that be causing issues. Out of Cards itself only uses a handful of cookies, which are used for site preferences and some cache stuff.

It does appear that our account session cookie though was incorrectly set to "Session", which means your browser would forget it when it is closed. A deploy is currently going out to revert that unintentional change.

Quote From NebuchadnezzarHS

Just tried with a different smartphone and same signout issue experienced. Now I am 100% sure that the cause is serverside. Any clues so far or perhaps close to a potential fix, Fluxflashor? 

Side question, why use so many cookies? I cannot imagine which useful purpose they might serve? Most of them are probably coming from the ads. Actually, I am pretty sure about this as well because performing the same login test in incognito mode shows a very different amount of cookies in use. 

Advertisers use cookies to try and deliver more tailored ads towards you.

Google's AdSense page has a bit more info on this if you're interested! https://support.google.com/adsense/answer/7549925?hl=en 

While that page isn't going to be the full answer, because Google's ad network is only one piece of the puzzle with who gets to serve ads on the site, everyone else is doing the same stuff.

Quote From Horus

Quote From Fluxflashor

There should have only been one initial sign-out.

Curious about re-re-re-verifications though. I haven't been able to replicate that with the first verification working without issue. I do know after verification you'll need to sign-in again though. If there are any sign-outs after you've been verified, that's definitely not intentional!

Out of curiosity, did anyone take a "while" to go click on their verification link?

I was under the impression that I was getting it done too fast, as the 3 verifications emails I received were all within the same 2 minutes.
And upon login later on from home, I was prompted to sign-in, and again this morning, returning to work, had to do it again; not a huge deal, but not like usual either.

I've figured out the issue with the signouts and that should now be resolved. It'll require everyone to login again but functionality should be restored to what it originally was once that happens. Behind the scenes we used to do a "remember me" with our session cookies, this wasn't the case after the deploy yesterday so now we're back to remembering everyone again as a default.

Did you, on the verification page, load the page once and receive three different emails? If you can remember, if you can walk me through your login and verification process that'd be great.

Quote From Horus

If I recall the steps, in the right order:

-I tried loggin in but was prompted to verified account, and was send a link (1st email)
-open email, verified and tried loggin again
-was prompted with an other verification (2nd email)
-opened email, re-verified and then tried loggin in again
- (one more repeat of the very same steps, with a separate 3rd email for verification)
-verified account, then successfully loggin
-left the web page, came back a bit later, still needed to loggin upon return, then again later, but from a different computer

Hope this helps

Could you forward me all the verification emails to "[email protected]". Thanks!

Quote From NebuchadnezzarHS

The signout issue seems to be resolved and it unintentionally having become a session cookie would indeed explain the phenomenon. Thanks for the quick fix, Fluxflashor! 

Regarding the third party cookies, I understand how they work even though I do not agree with them whatsoever. It is quite unfortunate how most of the internet is driven by them nowadays.

Anyways, everything seems to be back to normal again now which makes me happy, so kudos! 👍

Glad to hear it!

And yeah, third party cookies suck and are an unfortunate necessity on the modern web.

Quote From Horus

Enjoy!

Thanks!

I've made some changes that might have solved the issue. We'll have to wait and see if anyone else ends up with multiple confirmations.